[ 
https://issues.apache.org/jira/browse/NIFI-2704?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15449712#comment-15449712
 ] 

ASF GitHub Bot commented on NIFI-2704:
--------------------------------------

GitHub user mcgilman opened a pull request:

    https://github.com/apache/nifi/pull/971

    Reuse DataTransferAuthorizable in DataTransferResource

    NIFI-2704:
    - Re-using the DataTransferAuthorizable in the DataTransferResource.
    - Removing use of the DataTransferResource when obtaining site to site 
details as it performs additional unnecessary checks.
    - Code clean up.

You can merge this pull request into a Git repository by running:

    $ git pull https://github.com/mcgilman/nifi NIFI-2704

Alternatively you can review and apply these changes as the patch at:

    https://github.com/apache/nifi/pull/971.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

    This closes #971
    
----
commit 3340e46a1c28531d3a40258db6b5300f43ea37eb
Author: Matt Gilman <[email protected]>
Date:   2016-08-30T18:10:41Z

    NIFI-2704:
    - Re-using the DataTransferAuthorizable in the DataTransferResource.
    - Removing use of the DataTransferResource when obtaining site to site 
details as it performs additional unnecessary checks.
    - Code clean up.

----


> DataTransferResource should utilize the DataTransferAuthorizable
> ----------------------------------------------------------------
>
>                 Key: NIFI-2704
>                 URL: https://issues.apache.org/jira/browse/NIFI-2704
>             Project: Apache NiFi
>          Issue Type: Bug
>          Components: Core Framework
>            Reporter: Matt Gilman
>            Assignee: Matt Gilman
>             Fix For: 1.1.0
>
>
> The DataTransferResource should utilize the DataTransferAuthorizable to run 
> the same authorization logic regardless of context. This will ensure the 
> entire entity chain is checked consistently.
> Additionally, we should be able to relax the check when obtaining site to 
> site details as that endpoint does not involve the transfer of data.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to